COM+ / RPC Reboot Problem

[tensor]

First off, here's what I'm running:
WinXP Pro SP2, all patches
NOD32, latest
ZAP, latest

This problem started today...nothing installed, no email opened, NOD and ZAP running...I get an RPC error and the system reboots after 60 secs. Everything comes up normally. Here's the entry from my event viewer:

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 10/30/2004
Time: 7:21:32 PM
User: N/A
Computer: ENTERPRISE
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 800706BA from line 44 of
d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please
contact Microsoft Product Support Services to report this error.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I know this sounds like the Blaster virus, but there's no trace of it or any related worm on my system. WallWatcher shows no unusual port activity. Nothing strange in my firewall logs.

Has anyone run into this lately? Can't seem to find any info on google, google groups, or ms. Thanks alot.

[GlobalForce]

Hi Tensor, and Welcome to Wilder's!

I can't assist tech wise, but have a look at this page at Experts-Exchange (http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21084206.html).
You'll need to scroll at least 2/3rd's of the page for the discussion.

The processing line is slightly different though, like this;
HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.

Here's another page with the exact error message at MSN Groups (http://groups.msn.com/WindowsXPInsideOut/general.msnw?action=get_message&mview=0&ID_Message=1027&LastModified=4675489978572943503), something to do with Office updates.
Hope you find something.....

GF

[Marja]

Tensor,

Hi! I have had that same Event on my System ever since SP2 got downloaded on my machine. One of my AV's says I have a virus, Apocalipse (that's the spelling AV gives it), but after Jotti's on-line scanner and two other scans, no one else has found anything, either.

That said, all of those error messages were also followed by an error from Volume Shadow Copy Service, did you have the SP Security Center turned off? Did you have a firewall and the XP firewall on? I was looking on the Application log and it seems to coincide with the XP firewall hanging and not having Windows UpDate on Automatic, when I put it back on auto, all that seems to have stopped. Still, would feel better with a more professional answer, as would you, I am sure.

SO, maybe we ought to "contact MicroSoft...." ? Let me know what they say! :D

Wish I could give you more help, I am sure someone will come around and give more professional advice.

Cheers!

Marja8)

[gerardwil]

Find this one:

http://www.mcse.ms/printthread.php?threadid=21208

[tensor]

Thanks guys. The error has not come back since I posted here...maybe that was the fix ;)

From all the posts I've seen it seems to be a bug related to SP2...I'm pretty sure at this point it's not a virus or a worm...It seems to affect XP, 2000 and 2003 servers but it doesn't seem chronic or widespread enough to warrant some kind of hot fix. Posts with this problem seem to drop off after a while with no real solution.

If I find anymore useful info, I'll post it here.

tensor

[GlobalForce]

Maybe you can find some "professional advice" on sp2 here (http://support.microsoft.com/oas/default.aspx?&c1=509&gprid=6794&).
Read the options carefully.....

GF